Privacy and Security Policy

de Petit Lafitte

Privacy and Security Policy of Petit Lafitte Beach Front Hotel & Bungalows

It is part of the culture and values of Petit Lafitte Beach Front Hotel & Bungalows to act with integrity and respect the privacy concerns of our guests. We understand that you care about how your information is used, and we appreciate your trust that we will use it carefully and sensibly. This Privacy Policy details how we handle and maintain the information collected when you visit or use our website, access one of the mobile applications available in connection with our Services, or access or use the social media pages we manage and control, through any of our email marketing campaigns, as well as through the managed relationships necessary for the provision of our hospitality services (collectively, the "Services"). This policy describes our disclosure policies, as well as the options you have regarding the use, access, and correction of your information. This policy does not describe the information collection policies or practices of third parties, including those with whom we may contract for the provision of Services or those that may be linked or integrated within any of our websites.

For more information about our privacy practices in the European Union. For more information about our privacy practices in California. We encourage you to review this Privacy Policy periodically. Your use of our Services constitutes your consent to the terms contained herein. If you do not agree with the practices described in this Privacy Policy, you should not use our Services. We may update this Privacy Policy periodically, and any changes will be reflected here. If the changes are significant, we will provide more prominent notice and, at our discretion, we may send you a direct notification via email.

Data Collection

We collect data and information about our guests and other visitors to better provide our Services. The data collected is provided by you, either directly or through your use of the Services.

Personal Data

- Personal data refers to any data that can identify you as an individual or relate to an identifiable individual. At various points during your stay and experience with Petit Lafitte Beach Front Hotel & Bungalows, we collect certain Personal Data, such as:

- Contact Information: Name and surname, email address, phone number, address, state, province, country, postal code, city, etc.

- Demographic Information: Age, gender, date of birth, anniversary, primary language, etc.

- Reservation/Visit: Arrival and departure dates, special requests, goods and services purchased and consumed, etc. Interests and Preferences: Regarding past, current, and future stays at Petit Lafitte Beach Front Hotel & Bungalows, such as your interests, activities, hobbies, food and beverage choices, etc.

In more limited circumstances, we may also collect data about family members and companions, such as children's ages. Images and audiovisual data through (a) security cameras located in public areas, such as hallways and restaurants. If you submit Personal Data about other individuals to us (for example, if you make a reservation for another person), you represent that you have the authority to do so and allow us to use the data in accordance with this Privacy Policy.

Payment Processing Information

When you make a payment in relation to the purchase of any of the Services, Petit Lafitte Beach Front Hotel & Bungalows may obtain credit card or other payment information.

Usage Data

Usage Data is collected automatically when you use the Service. Usage Data may include information such as your device's IP address, browser type (e.g., Chrome, Firefox, Edge, or Safari), browser version, the pages of our Service that you visit, the date and time of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data. When you access the Service through or via a mobile device, we may also automatically collect certain information, including but not limited to, the type of mobile device you use, your mobile device's unique ID or IP address, your mobile operating system, the type of mobile internet browser you use, unique device identifiers, and other diagnostic data. We may also collect information that your browser sends whenever you access the Service through or via a mobile device.


A cookie is a small data file that resides on your computer and allows us to recognize you as a user when you return using the same computer and web browser. Cookie data is used to personalize your experience when using the Services. When you visit our website, you are notified about the use of cookies for tracking and analysis purposes and asked to provide your explicit consent. Cookies can be "Persistent" or "Session" cookies. Persistent cookies remain on your personal computer or mobile device after you disconnect, while session cookies are deleted as soon as you close your web browser. We use both Session and Persistent cookies for the purposes set forth below:

- Necessary / Essential Cookies: Type: Session Cookies; Managed by: Us. Purpose: These cookies are essential to provide you with the Services. They help authenticate users and prevent fraudulent use of user accounts. We only use these cookies to provide the Services.

- Cookies for Acceptance of Cookie Policy / Notice: Type: Persistent Cookies; Managed by: Us. Purpose: These cookies identify whether users have accepted the use of cookies on the website(s).

- Functional Cookies: Type: Persistent Cookies; Managed by: Us. Purpose: These cookies allow us to remember the choices you make when using our website(s), such as remembering your login details or language preference. The purpose of these cookies is to provide you with a more personalized experience and avoid having to re-enter your preferences each time you use the website(s).

- Tracking and Performance Cookies: Type: Persistent Cookies; Managed by: Third parties. Purpose: These cookies are used to track information about traffic to the website and how it is used. The information collected may directly or indirectly identify you as an individual visitor. This is because the collected information is usually linked to a pseudonymous identifier associated with the device you use to access the website. We may also use these cookies to test new advertisements, pages, features, or website functionality to see how our users react to them.

- Advertising and Tracking Cookies: Type: Persistent Cookies; Managed by: Third parties. Purpose: These cookies track your browsing habits to allow us to show you advertising that is more likely to be of interest to you. They use information about your browsing history to group you with other users who have similar interests. Based on that information, and with our permission, third-party advertisers may place cookies to enable them to display ads that we believe will be relevant to your interests while you are on third-party websites.

Log files are deleted after 120 days. Session cookies expire and are deleted at the end of your browser session. Persistent cookies can be set to expire from 30 days to 1 year, depending on the cookie's function. After these periods expire, the information will be deleted or anonymized. You can instruct your browser to reject all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Service. Most modern internet browsers allow individuals to change settings in the 'options' or 'preferences' menu to prevent or limit the storage of cookies. Additionally, third-party cookies generated by certain advertisers can be disabled by requesting through the Network Advertising Initiative. Visit for more information.

In addition to cookies, we also use Web Beacons and Embedded Scripts. Web beacons help us better manage content in our Services by informing us which content is effective. Web beacons are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of web users. This information is used to help improve the quality and overall experience of the Services. Embedded Script is a programming code that collects information about your interactions with the Services, such as the links you click on. The code is temporarily downloaded to your computer or other device from our server or a third-party service provider and is deactivated or deleted when you disconnect from the Service.

We also collect data through Google Analytics and Adobe Analytics, which use cookies and technologies to gather and analyze data about the usage of the Services. These services collect data about the usage of other websites, apps, and online resources. You can learn about Google's practices by visiting and opt-out by downloading the Google Analytics Opt-out Browser Add-on available at For more information about Adobe and to opt-out, visit

Use and Disclosure of Data

The data and other information we collect are used and disclosed in the following manner and for the following purposes:

- To provide and maintain our Service, including monitoring the usage of our Service.

- To manage your account: to manage your registration as a user of the Service. The information you provide may grant you access to different features of the Service that are available only to registered users.

- For the performance of a contract: the development, fulfillment, and execution of the contract for the purchase of products, items, or services that you have acquired, or any other contract with us through the Service.

- To contact you via email, phone calls, SMS, or other equivalent forms of electronic communication, such as push notifications from a mobile application, about updates or informational communications related to the functionalities, products, or services contracted, including security updates, when necessary or reasonable for their implementation.

- To provide you with news, special offers, and general information about other goods, services, and events that we offer, which are similar to those you have already purchased or inquired about, unless you have opted out of receiving such information.

- To address and manage your inquiries to us.

- To personalize the content, recommendations, and offers that we show you in the Services and in other online locations.

- To improve the Services and our products, including involving you in surveys and other internal business purposes.

We disclose information and data, including personal data, to other companies for the purposes described in this Privacy Policy, such as providing and personalizing the Services, communicating with you, and fulfilling our business purposes. We share your booking data and other related data with the applicable property to fulfill and complete your reservation. Our goal is to provide you with the highest level of hospitality, and to help us achieve this goal, we share personal data and other data with the following parties:

Strategic Business Partners: We disclose data, including personal data, and other information with select strategic business partners who provide goods, services, and offers that enhance your experience at our properties or that we believe will be of interest to you. By sharing data with these parties, we can make personalized services and unique travel experiences available to you. For example, this sharing allows the spa, restaurant, concierge, and other services at our properties to provide you with services. This sharing also enables us to offer you a single source for purchasing packages that include travel-related services, such as airline tickets and vacation packages.

Service Providers: We disclose data, including personal data, and other information to external service providers for the purposes described in this Privacy Policy. Examples of service providers include companies that provide web hosting, data analytics, payment processing, order fulfillment, provision of IT infrastructure, customer service, email delivery, marketing, auditing, and other services.

Corporate Reorganization / Business Transfers: We may disclose or transfer your data and other information to a third party in the event of any reorganization, merger, sale of our assets, financing, joint venture, assignment, transfer, or other disposition of all or any part of the business, assets, or shares of Petit Lafitte Beach Front Hotel & Bungalows. We may share or transfer your personal information in connection with, or during negotiations for any merger, sale of assets, financing, or acquisition of all or part of our business to another company. In any case, the use and disclosure of your data by the successor organization will continue to be subject to this policy, unless (i) a court orders otherwise, for example, a bankruptcy court; or (ii) the successor organization notifies you that your data will be subject to the privacy policy of the successor organization, along with an opportunity for you to opt-out (which may result in you not being able to continue using the website). If you provide personal data after such transfer, that information may be subject to the privacy policy of the successor entity.

Draws, Contests, and Promotions:
We may work with third parties who sponsor or offer draws, contests, and other promotions. By participating in a promotion, you agree to the terms, conditions, or official rules governing that promotion, which may include specific requirements for you, including, except where prohibited by law, allowing us and the sponsor(s) of the promotion to use your name, voice, likeness, or other indicia of person in advertising or marketing. If you choose to participate in a promotion, personal information may be disclosed to third parties or to the public in connection with the administration of such promotion, including, but not limited to, in relation to the selection of winners, prize fulfillment, and as required by law or permitted by the promotion's official rules, such as in a winners' list.

With other users: When you share personal information or interact in public areas with other users, such information may be viewed by all users and could be publicly distributed. If you interact with other users or register through a third-party social media platform, your contacts on such social media platforms may see your name, profile, photos, and description of your activity. Similarly, other users may view descriptions of your activity, communicate with you, and view your profile.In addition to the above scenarios, we may also disclose information about you to certain third parties if we have a good faith belief that we are obligated to do so by law or legal process, to respond to legal claims, or to protect our rights, property, or safety, or the rights, property, or safety of others.

Data Retention

We will retain data, including personal data, and other information for the purposes outlined in this Privacy Policy. We will retain and use such data and information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. We will also retain usage data for internal analysis purposes.

Third-Party Links

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third-party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Consent for Transfer

Petit Lafitte Beach Front Hotel & Bungalows operates in Mexico. If you are located outside of Mexico, please be aware that the information we collect will be transferred and processed in both Mexico and the United States. By using our website(s) or Services, or providing us with any information, you understand and unequivocally consent to this transfer, processing, and storage of your information in both Mexico and the United States, jurisdictions where privacy laws may not be as comprehensive as in your country of residence and/or citizenship.

Information Security

The security of your data is important to us, and Petit Lafitte Beach Front Hotel & Bungalows takes commercially reasonable security measures and backups to protect the information you submit to us. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security. We encourage our customers and partners to keep copies of all information uploaded to their systems.

Privacy of Children

The services are general audience services and are not intended for individuals under the age of 13. We do not knowingly collect personal data from individuals under the age of 13 without parental consent. If we discover that a child under the age of 13 has provided us with personal data, or that we have inadvertently collected personal data from anyone under the age of 13, we will delete it in accordance with applicable law.

Privacy in California

California residents have additional rights regarding the use of their data and have the right, once a year, free of charge, to request and obtain certain information about our disclosure, if any, of certain categories of personal information to third parties for their direct marketing purposes in the previous calendar year. California residents under 18 years old who are registered users of online sites, services, or applications also have the right under California law to request and obtain the removal of content or information they have publicly posted. If you are a California resident and wish to request the removal of such data, you can contact us using the contact information provided below. California residents also have the right to exercise certain rights expressly established by the California Consumer Privacy Act, including the right to give the "Do Not Sell My Personal Information" instruction to third parties. For additional details about your privacy rights in California, please see our California privacy notice.

Privacidad en la Unión Europea

Cumplimos con las disposiciones del Reglamento General de Protección de Datos de la Unión Europea (“GDPR”) en cuanto a cualquier información en su posesión relacionada con personas basadas en la UE (“sujetos de datos”). En consecuencia, solo procesamos información personal sobre sujetos de datos cuando tenemos una base legal para hacerlo, lo que puede incluir el consentimiento de cada persona (especialmente en el caso de visitantes del sitio web que proporcionan su información) o el cumplimiento de una obligación legal.

Para obtener detalles adicionales sobre sus derechos de privacidad en la Unión Europea, consulte nuestro aviso de privacidad de la Unión Europea.


Podemos utilizar proveedores de servicios de terceros para mostrarle anuncios para ayudar a mantener y mantener nuestro Servicio. Estos terceros incluyen, entre otros:

- Google AdSense & DoubleClick Cookie: Google utiliza cookies para servir anuncios en nuestro Servicio. El uso de la cookie de DoubleClick por parte de Google le permite a él y a sus socios servir anuncios a nuestros usuarios basados en su visita a nuestro Servicio u otros sitios en Internet. Puede optar por no utilizar la cookie de DoubleClick para publicidad basada en intereses visitando la página de configuración de anuncios de Google:

- Bing Ads: Bing Ads es un servicio de publicidad proporcionado por Microsoft Inc. Puede optar por no participar en los anuncios de interés de Bing Ads siguiendo las instrucciones en la página de exclusión de Bing Ads: Para obtener más información sobre Bing Ads, visite su Política de Privacidad:

Marketing por Correo Electrónico

Podemos utilizar la dirección de correo electrónico que nos proporciona para contactarlo con boletines, materiales de marketing o promocionales y otra información que pueda ser de su interés. Puede optar por no recibir ninguna o todas estas comunicaciones siguiendo el enlace de cancelación de suscripción o las instrucciones proporcionadas en cualquier correo electrónico que enviemos o contactandonos como se establece a continuación. El registro para nuestro boletín informativo se realiza en un procedimiento de doble aceptación. Esto significa que después de registrarse recibirá un correo electrónico pidiéndole que confirme su registro. Esta confirmación es necesaria para evitar el uso no autorizado de su dirección de correo electrónico por otra persona. Podemos utilizar ciertos proveedores de servicios de marketing por correo electrónico de terceros, como TravelClick, una Compañía Amadeus para gestionar y enviar correos electrónicos a usted. La Política de Privacidad de TravelClick puede verse en:
legal/travelclick-policies/Remarketing ConductualUtilizamos servicios de remarketing para anunciar en sitios web de terceros después de que haya visitado uno de nuestros sitios web. En el curso de hacerlo, utilizamos cookies para informar, optimizar y servir anuncios basados en sus visitas anteriores a nuestro Servicio, tales como:

Google Ads (AdWords): El servicio de remarketing de Google Ads (AdWords) es proporcionado por Google Inc. Puede optar por no participar en Google Analytics para Publicidad de Display y personalizar los anuncios de la Red de Display de Google visitando la página de configuración de anuncios de Google: Google también recomienda instalar el complemento de inhabilitación para navegadores de Google Analytics - - para su navegador web. El complemento de inhabilitación para navegadores de Google Analytics proporciona a los visitantes la capacidad de evitar que sus datos sean recopilados y utilizados por Google Analytics. Para obtener más información sobre las prácticas de privacidad de Google, visite la página web de Privacidad y Términos de Google:

Bing Ads Remarketing: El servicio de remarketing de Bing Ads es proporcionado por Microsoft Inc. Puede optar por no participar en los anuncios de interés de Bing Ads siguiendo sus instrucciones: Puede obtener más información sobre las prácticas de privacidad y políticas de Microsoft visitando su página de Política de Privacidad:

Twitter: El servicio de remarketing de Twitter es proporcionado por Twitter Inc. Puede optar por no participar en los anuncios basados en intereses de Twitter siguiendo sus instrucciones: Puede obtener más información sobre las prácticas de privacidad y políticas de Twitter visitando su página de Política de Privacidad:

Facebook/Instagram: El servicio de remarketing de Facebook es proporcionado por Facebook Inc. Puede obtener más información sobre la publicidad basada en intereses en Facebook visitando esta página: Para optar por no participar en los anuncios basados en intereses de Facebook, siga estas instrucciones de Facebook: Facebook se adhiere a los Principios de Autorregulación para la Publicidad Conductual en Línea establecidos por la Alianza de Publicidad Digital. También puede optar por no participar en Facebook y otras compañías participantes a través de la Alianza de Publicidad Digital en los EE. UU., la Alianza de Publicidad Digital de Canadá en Canadá o la Alianza Europea de Publicidad Digital Interactiva en Europa, o excluirse utilizando la configuración de su dispositivo móvil. Para obtener más información sobre las prácticas de privacidad de Facebook, visite la Política de Datos de Facebook:

AdRoll: El servicio de remarketing de AdRoll es proporcionado por Semantic Sugar, Inc. Puede optar por no participar en el remarketing de AdRoll visitando esta página de Preferencias de Publicidad de AdRoll: Para obtener más información sobre las prácticas de privacidad de AdRoll, visite la página web de Política de Privacidad de AdRoll:

Fan Page de Facebook

Somos los Controladores de Datos de los datos personales recopilados mientras se utiliza el Servicio. Como operadores de la Fan Page de Facebook, Petit Lafitte Beach Front Hotel & Bungalows y Facebook son Controladores Conjuntos. Visite la Política de Privacidad de Facebook para obtener más información sobre cómo Facebook gestiona los datos personales o contactar a Facebook en línea, o por correo: Facebook, Inc. ATTN, Privacy Operations, 1601 Willow Road, Menlo Park, CA 94025, Estados Unidos.

Insights de Facebook

Utilizamos la función de Insights de Facebook en relación con la operación de la Fan Page de Facebook para obtener datos estadísticos anonimizados sobre nuestros usuarios. Para este propósito, Facebook coloca una Cookie en el dispositivo del usuario que visita nuestra Fan Page de Facebook. Cada Cookie contiene un código de identificador único y permanece activa durante dos años, excepto cuando se elimina antes de que finalice este período. Facebook recibe, registra y procesa la información almacenada en la Cookie, especialmente cuando el usuario visita los servicios de Facebook, servicios que son proporcionados por otros miembros de la Fan Page de Facebook, y servicios de otras compañías que utilizan los servicios de Facebook. Para obtener más información sobre las prácticas de privacidad de Facebook, visite la Política de Privacidad de Facebook aquí:ttps:// a esta Política de PrivacidadPodemos actualizar esta Política de Privacidad en cualquier momento y los cambios serán efectivos al publicarse. Si hay cambios importantes en la forma en que tratamos sus datos, mostraremos un aviso en nuestro(s) sitio(s) web, o por otros medios. Le animamos a revisar esta Política de Privacidad periódicamente para detectar cualquier cambio. El uso continuo de nuestro(s) sitio(s) web o nuestros Servicios después de cualquier actualización constituirá su acuerdo con la nueva política.


Si tiene alguna pregunta sobre esta Política de Privacidad, las prácticas o el uso del/los sitio(s) web o Servicios, puede contactarnos:Por correo electrónico: Por correo postal: Petit Lafitte Beach Front Hotel & Bungalows, Playa del Carmen, Quintana Roo, México. Atención: Controlador.

Privacidad en la Unión Europea

Si usted es residente de la Unión Europea (la “UE”) o reside en el Espacio Económico Europeo (el “EEE”) y recopilamos datos personales relacionados con usted en el contexto de la oferta de los Servicios, sus datos estarán sujetos al Reglamento (UE) 2016/679 (Reglamento General de Protección de Datos, “GDPR”).

Base Legal para el Procesamiento de Datos Personales bajo el GDPR

Podemos procesar sus datos bajo una de las siguientes condiciones:

- Consentimiento: Usted ha dado su consentimiento para el procesamiento de datos personales para uno o más propósitos específicos.

Ejecución de un contrato: La provisión de datos personales es necesaria para la ejecución de un acuerdo con usted y/o para cualquier obligación precontractual del mismo.

- Obligaciones legales:
El procesamiento de datos personales es necesario para el cumplimiento de una obligación legal a la que estamos sujetos.

- Intereses vitales: El procesamiento de datos personales es necesario para proteger sus intereses vitales o los de otra persona natural.

- Intereses legítimos: El procesamiento de datos personales es necesario para los intereses legítimos de Petit Lafitte Beach Front Hotel & Bungalows.

En cualquier caso, a solicitud razonable, estaremos encantados de ayudar a aclarar la base legal específica que se aplica al procesamiento, y en particular si la provisión de datos personales es un requisito legal o contractual, o un requisito necesario para celebrar un contrato.

Sus Derechos bajo el GDPR

Petit Lafitte Beach Front Hotel & Bungalows se compromete a respetar la confidencialidad de sus datos y a garantizar que pueda ejercer sus derechos. Usted tiene el derecho bajo esta Política de Privacidad, y por ley, si se encuentra dentro de la UE, a:

- Solicitar acceso a sus datos. Puede acceder, actualizar o solicitar la eliminación de sus datos, por favor contáctenos y haremos todo lo posible para ayudarle. También tiene derecho a recibir, previa solicitud, una copia de los datos
Bodas & Grupos